[Gllug] Extend openssl certs?

[Benjamin Donnachie]

My server certificates have expired and, rather than generate new ones, 
I'm being lazy and trying to extend the old ones...

However, the following keeps failing:

openssl x509 -in old/cyrus.pem -days 2000 -out cyrus.pem -signkey 
../private/cakey.pem

The file cyrus.pem contains the certificate and private key.  After the 
above command I've been copying the private key section back in but on 
restarting I get the very unhelpful error:

May 14 20:43:19 kevin imaps[20851]: unable to get private key from 
'/var/imap/cyrus.pem'
May 14 20:43:19 kevin imaps[20851]: TLS server engine: cannot load 
cert/key data
May 14 20:43:19 kevin imaps[20851]: error initializing TLS
May 14 20:43:19 kevin imaps[20851]: Fatal error: tls_init() failed

I've checked the permissions and the .pem file contains both -----BEGIN 
RSA PRIVATE KEY----- and -----BEGIN CERTIFICATE----- sections.

I'm sure I just extended them before...  Any ideas? :-/

Ben
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug